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Lemma for Linear Feedback Shift Registers 
and DFTs Applied to Affine Variety Codes 

Hajime Matsui 
Abstract 

In this paper, we establish a lemma in algebraic coding theory that frequently appears in the encoding and 
decoding of, e.g., Reed-Solomon codes, algebraic geometry codes, and affine variety codes. Our lemma corresponds 
to the non-systematic encoding of affine variety codes, and can be stated by giving a canonical linear map as the 
composition of an extension through linear feedback shift registers from a Grobner basis and a generalized inverse 
discrete Fourier transform. We clarify that our lemma yields the error-value estimation in the fast erasure-and-error 
decoding of a class of dual affine variety codes. Moreover, we show that systematic encoding corresponds to a special 
case of erasure-only decoding. The lemma enables us to reduce the computational complexity of error-evaluation from 
0(n 3 ) using Gaussian elimination to 0(qn 2 \og q n) with some mild conditions on n and q, where n is the code 
length and q is the finite-field size. 

Index Terms 

Grobner bases, evaluation codes from order domains, fast decoding, systematic encoding, Berlekamp-Massey- 
Sakata algorithm. 

I. Introduction 

Affine variety codes [8|,[11],[17|,[24] belong to a naturally generalized class of algebraic geometry (AG) codes, 
and are also known as evaluation codes from order domains of finitely generated types [ 1 ],[ 10|,|T5l, lfT6l . It is known 
(8) that affine variety codes represent all linear codes. On the other hand, Pellikaan et al. [25] have already shown 
that AG codes, especially codes on algebraic curves, also represent all linear codes. Thus, from the viewpoint 
of code construction, one might consider only codes on algebraic curves. However, in terms of decoding, it is 
insufficient to focus only on AG codes, because many efficient decoding algorithms can correct errors up to half 
the generalized Feng-Rao minimum distance bound d-pn, [4|,[23],[27|,[32], which depends on orders among vector 
basis or monomial basis. Whereas AG codes use a specified order, affine variety codes have the advantage that they 
can choose their orders flexibly, allowing them to reach potentially good dpR values. 
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Pellikaan l26l developed a decoding algorithm for all linear codes using a terror correcting pair and solving a 
system of linear equations; its computational complexity is of the order n 3 , where n is the code length. On the 
other hand, Fitzgerald et al. [8| and Marcolla et al. 1171 proposed decoding algorithms via the Grobner basis that 
correct errors up to half the minimum distance [(^min — 1)/2J for affine variety codes; as this type of decoding 
belongs to the class of NP-complete problems [2|, the strong suggestion is that the algorithms in [8|,[17| do not 
run in polynomial time. 

The decoding of dual affine variety codes up to [(^fr — 1)/2J can be divided into two steps, namely error- 
location and error-evaluation. For the error-location step, O'Sullivan Q],(7] S ave a generalization of the Berlekamp- 
Massey-Sakata (BMS) algorithm for finding the Grobner bases of error-locator ideals for affine variety codes. The 
computational complexity of this algorithm is bn 2 (where b is the number of elements in the Grobner bases), which 
is less than n 3 . However, for the error-evaluation step in the decoding, no efficient method with a computational 
complexity of less than n 3 has been found. Although there is a method |[T5l for error-value estimation based on 
the generalization of the key equation, its relation to the BMS algorithm has not been clarified, as discussed in 1131 
page 15], and its computational complexity has not been determined. Another method that uses the inverse matrix 
of the proper transform was introduced by Saints et al. [29 1, but its computational complexity is of the order n 3 , 
because the inverse matrix must be computed for each error-evaluation step per decoding. Thus, there is currently 
no efficient method for error-value estimation in conjunction with the BMS algorithm. 

The contents of this paper can be divided into three parts. First, we realize a generalization of the A-dimensional 
(A-D) discrete Fourier transform (DFT) and its inverse (IDFT) over finite fields, where N is a positive integer. 
Let q be a prime power, F g be the finite field of q elements, F* = F g \{0}, (F*)^ be the set of all A-tuples of 
elements in F*, and F^ be similar to (F* ) N . Whereas the conventional A-D DFT and IDFT over finite fields 
are defined upon vectors whose components are indexed by (F*) N , our generalized transforms are defined upon 
vectors whose components are indexed by F^, and agree with the conventional ones if they are restricted to (F*) W . 
In particular, our generalized transforms satisfy the Fourier inversion formulae; the inclusion-exclusion principal 
plays an essential role in their proofs. Secondly, we prove a lemma, which we call Main Lemma, concerning the 
linear feedback shift registers made by Grobner bases and the generalized IDFT. Main Lemma provides a canonical 
isomorphic map from one vector space, consisting of vectors whose components are indexed by D(^>), onto another 
vector space consisting of vectors whose components are indexed by <3>. Here, for any subset \& of F^ , D(^) is 
the delta set (or footprint) of the Grobner basis for an ideal of A-variable polynomials over ¥ q that have zeros at 
ty. Although these two vector spaces have the same dimension and are obviously isomorphic, our Main Lemma 
asserts that there is a canonical one-to-one map that does not depend on the choice of the bases of the vector spaces. 
This canonical isomorphic map can be explicitly written as the composition of the generalized IDFT after a map 
coming from the linear recurrence relations given by the Grobner bases. The inverse of this canonical isomorphic 
map agrees with the proper transform introduced by Saints et al. [29|. 

Finally, Main Lemma is applied to affine variety codes in the following three topics. The first is the construction 
of affine variety codes, specifically their non-systematic encoding. Usually, the parity check matrices of affine 
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variety codes must be derived from their generator matrices through matrix elimination. Using Main Lemma, we 
directly construct the dual affine variety codes as images of the canonical isomorphic map; this is analogous to the 
direct construction of affine variety codes as the images of the evaluation map. The second topic is the error-value 
estimation in the fast erasure-and-error decoding of a class of dual affine variety codes. We show that there is an 
efficient error-value estimation in conjunction with the BMS algorithm. Our method corresponds to a generalization 
of the methods of Sakata et al. [ 30 1,[ 3 1 1 for error-value estimation by DFT in case of one-point AG codes from 
algebraic curves, a subclass of AG codes. The final topic is the systematic encoding of the class of dual affine 
variety codes and the improved erasure-correcting capability. If a linear code has a non-trivial automorphism group, 
then it can be encoded systematically by the method of Heegard et al. Ifl2l and Little fl6l . Our systematic encoding 
does not use any automorphism group, and is applicable to a sufficiently wide class of dual affine variety codes. 
Moreover, we reveal that systematic encoding is a special type of erasure-only decoding; this fact is well-known 
in the case of maximum-distance codes [3|, and is shown for the class of dual affine variety codes. 

The contents of this paper are original, except for the definition of proper transforms ||29l , the definition of affine 
variety codes |8|, and the error-value estimation of AG codes [30],[31|. The other contents are still original, even 
for the limited case of AG codes. Furthermore, if one adopts the conventional N-D DFT and IDFT over (F* ) N in 
place of our generalized transforms, then our Main Lemma and its applications to a subclass of dual affine variety 
codes are specialized for those in El . 

As mentioned above, because the isomorphic map of Main Lemma is equivalent to the inverse map of the proper 
transform in (29), the above applications to affine variety codes can also be performed by multiplying by the 
inverse matrix of the proper transform. Nevertheless, our IDFT-based expression of the inverse map enables us to 
reduce the computational complexity; moreover, this can be reduced further by applying a multidimensional DFT 
algorithm or FFT Whereas the computational complexity of the error-value estimation with Gaussian elimination 
is of the order n 3 , that with the proposed method has an upper bound of the order nNq N , which is equivalent to 
qn 2 \og q n because N can be chosen as q N ~ x < n < q N . Thus, our generalized IDFT and Main Lemma are not 
only important in the theory of affine variety codes, but are also useful in reducing the computational complexity 
of their error-value estimation. 

The rest of this paper is organized as follows. In Section [II] we prepare some notation for the subsequent 
discussions. Section UTU gives a generalization of DFTs from (F* ) N to F^. In Section [IV] we state Main Lemma; 
Subsection IIV-AI defines two vector spaces via Grobner bases, Subsection IIV-BI defines the map from the linear 
feedback shift registers given by Grobner bases, and Subsection II V-CI gives an isomorphism between the two vector 
spaces. In Section [V] we apply the lemma to construct affine variety codes, reformulate erasure-and-error decoding 
algorithms, and determine the relation between systematic encoding and erasure-only decoding. In Section [VI] we 
estimate the number of finite-field operations in our algorithm; Subsection IVI-Al uses a simple count and Subsection 
I VLB I applies a multidimensional DFT algorithm. Section I VIII concludes the paper. 
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II. Notation 

Throughout this paper, the following notation is used. Let No be the set of non-negative integers. For a, & € No 
with a < b, let [a, b] = {a, a + 1, • • • , b}. For two sets A and B, a set A\B is defined as {u £ A | u G" B}. For an 
arbitrary finite set S, the number of elements in S is represented by and let Vs — {(v s ) s \ s £ S, v s £ ¥ q } 
denote an IS"! -dimensional vector space over ¥ q whose components are indexed by elements of S. Unless otherwise 
noted, for any arbitrary subset R C S, the vector space Vr is considered to be a subspace of Vs given by 
Vr — {(v s ) s £ Vs I v s — for all s £ A map / from a set A into a set B is represented by 

f:A^B [on /(a)] . 

III. Fourier-Type Transforms on F^ 
Let TV be a positive integer and let 

A = [0, q - l] N = { a = (ai, • • • , a N ) | ai, ■ • • , ajv 6 [0, g — 1] } , 
= F^ = {w = (wi,--- ,wjv)| wi,-- - ,w w eFJ. 
In this section, Fourier-type transforms are defined as maps between vector spaces, both of which have dim q N , 

V A = { (ha) A \aeA,ha_e¥ q }, 
y n = {( C ^)J ±t£ n > %eF ? }. 
Definition 1: (Generalization of the multidimensional DFT over ¥ q ) A linear map J- is defined by 



T:V n ^V A 



( c -)s 



(1) 



where to— = w^ 1 



and u a is considered as the substituted value u a = x a \ u , i.e., uj a =1 for all to £ ¥ q 



if a = 0. The linear map T : Vq —> Va of (U is called a generalized DFT on F^. □ 
Then, T is actually equal to the compound of ordinary DFTs in N and lower dimensions. 

Example 1: Assume N = 1. Note that, if a ^ and u = 0, then w a = trivially holds. Thus, (c a ) A 
•F((c u ) n ) G Va can be directly written as 



E 



a = 0. 



Assume N = 2. Then, for each (a%, 02) = (a, 6) G A, (c a b)A ~ 3~ (( c ^")o) e ^ can ^ e directly written as 

Ew^efi c^V- a ^ b = E«,,c)en,<K^o ^ U ip a ^ b ab^O 
EfcMen c <K>V> a = E(^,a,)en,^o c ^ a a 7^ 0, & = 

E(^,w)efi c V'" a;b = E(^.w)Gn,w^o tyu^ a = 0, & 7^ 

E(v>,w)efi c </"" a = 6 = 0. 



Assume JV = 3. Then, for each (eii, 02, 03) = (a, 6, c) e A, (c a f, c ) A = J 7 ((c^ w ) n ) g Va can be directly written 



J2(<i>,,p,uj)en c <l>^^ aujC = S(0,i/j,w)go,0w#o c^ w ^ a w c 



a& ^ 0, c = 
ac ^ 0, 6 = 
6c ^ 0, a = 
a^O, 6 = c = 
6/0, a = c = 
c^O, a = 6 = 
a = 6 = c = 0. 



In general, to write J 7 directly requires 2 W equalities. □ 

Definition 2: (Generalization of the multidimensional IDFT over ¥ q ) For each lo 6 f2, a subset I = I u = 
{ii ■ ■ ■ , im} of [1, JV] is determined such that • • • uj im ^ and u>i = for all i G [1, JV] \J. A linear map J" -1 
is then defined by 



J- 1 : Va -»• 



(Ma ^ 



(2) 



where 



9 -l 



E 1 E (- 1 ) |J| ^ 



(3) 



ii,— ,i m =l ^./C[l,JV]\7 

J in the sum runs over all subsets of [1, N]\I, and i(J, J) = (61, • • • , 6/v) 6 A is defined by, for 1 < i < JV, 

'■i ie I 
h = < q — l ie J 

i e [1, JV] \(l u J) . 

The linear map J 7-1 : Va — > Vh of (ffj is called a generalized IDFT on F^. □ 

For example, if u>i • • • ujn ^ for to = (uii, ■ ■ ■ ,ujn) G ^> then / is equal to [1, JV] and there is only one choice 
of J = 0. In this case, definition (0 implies 

9-1 



!i,-Jjv=1 



in other words, T 1 agrees with the JV-D IDFT if is restricted to (F* ) N . Q In general, for each uj e O, the 
value /i u is equal to a linear combination of IDFTs whose dimensions do not exceed JV. 



'For this special case, including a motivating example of Reed-Solomon codes, see |22|. 
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Example 2: Assume N = 1. If w ^ S ft, then 7 = {1} C [1, 1], J = C [1, 1]\7 = 0, and J) = h = i. 
If lu = e a then / = C [1, 1], J = or {1} C [1, 1]\7 = {1}, and J) = 0,q - 1, respectively. Thus, 
-T 7-1 ((^a)^) = (^") can be directly written as 

/l0 — /lg-1 U> = 0. 

Assume N = 2. For (wi,w 2 ) = G ft, e.g., if i/jgj ^ 0, then I = {1,2} C [1,2], J = C [1,2]\7 = 0, 

and J) = (h,l 2 ) = if ^ + and w = 0, then 7 = {1} C [1,2], J = or {2} C [1,2]\7 = {2}, and 

J) = i({l}, J) = (i, 0), (i, q — 1), respectively. Thus, ((ha) A ) = (jiipSj G Vq can be directly written 

as 



-T,jZl(ho,j - h g - hj )uj-i 



V> / 0, w = 

1p = 0,LJ^0 



flO,0 - ho,q-l - h q -lfi + h q -\ tq -l 1p = UJ = 0. 

Assume N = 3. For (wi, w 2 , w 3 ) = (<l>,ip,u) G ^, e.g., if ^ 0, V = <*> = 0, then 7 = {1} C [1,3] = {1,2,3}. 
Hence, J C [1,3]\7 = {2,3} has four choices, i.e., J = 0, {2}, {3}, {2, 3}, and so, J) = i({l},J) = 
(i, 0,0), (i, q - l,0),(i,0,g - 1),(«,(7 - 1,9 - 1), respectively. Thus, J 7-1 ((/io) A ) = (h^u^ Q G Vn can be 
directly written as 



Z)ijil( ft i,j,0 - hij i q-- L )<t>- i tlj- j 



£',7=^1 (foj,! - h q-l,j,l)">P~ j U~ l 

— £i=l (^,0,0 — ^i,g-l,0 — hifi,q-l + ^i,g-l,g-l)0 * 

- Z)j=l (^O.j.O - hg-ljfi - ho,j t q-l + hq-lj,q-l)ll)~i 
~ Z)'=l (^0,0,; - ^g-l,0,i - ho,q-l,l + h q -i t q-ij)uj~ l 

^0,0,0 — ^0,0,9-1 — ^0, 9-1,0 — ^q-1,0,0 

+/l0,g-l,9-l + ^g-l,0,g-l + ^ 9 -l,g-l,0 - ^g-l,g-l,g-l 

In general, the summand in each condition of w consists of 2 N ~ m terms, where to is the number of non-zero 
components in w. □ 



/ 

0V ^ 0, w = 
0w ^ 0, V = 
^ 0, = 
0^0, v = w = o 
V> ^ o, ^ = w = o 
w ^ 0, = v = o 



= V = w = 0. 



7 



Proposition 1: (Generalization of the Fourier inversion formulae) Two linear maps J- : Vq — > Va and J- 1 : 
Va -> Vh are the inverse of each other, i.e., J 7-1 (j 7 ((oj^)) = (c„) and ^(j 7-1 ((fra) A )) = (^a) A - □ 
The proof is described in Appendix [A] This proposition corresponds to one of the basic concepts in this paper. 

IV. Main Lemma 

A. Two vector spaces Vp and V% 

Let $CS] with ^ ^ and n = \^\. One of the two vector spaces in the lemma is given by 

V* = I (c^j tJj_ G E ¥ q j , 

namely, Vip is the vector space over ¥ q indexed by the elements of whose dimension is trivially n. The other of 
the two vector spaces is somewhat complicated to define, as it requires Grobner basis theory |6). Let ¥ q [x\ be the 
ring of polynomials with coefficients in ¥ q whose variables are x\, ■ ■ ■ , Xpf. Let Zy be an ideal of ¥ q [x] defined 
by 

= { f(x) G ¥ q [x] I f(f) = for all f_ G . 

Note that xj -Xi e Zq, for all 1 < i < N, as * ^ 0. We fix a monomial order ^ of {x- \ d G N^} @, and then 
denote, for f(x) G ¥ q [x\, 

LM(/) = max { x- | d G Nq , fd^O} 

if /fe) = ]T e ¥ ik] and /(*) ^ 0, 

where ffi — — X-y ' ' ' X ^ for d = (di, • • • , d/v) G N^, and LM(/) is called the leading monomial of f(x) G F g [x]. 
The delta set D = C of for 1- EH is then defined by 

D = £>(*) = <\ {mdeg (LM(/)) | ^ f(x) eZ*}, 

where mdeg (x-) — d G N^. Fortunately, D(^) has an intuitive description if a Grobner basis CJ^ of Zy is 
obtained; it corresponds to the area surrounded by LM The delta set D = D(^f) C of for \& is 

equivalently defined by 

{x± \ deD{^)} = 

{x± |dG<}\{LM(/) |0^/(x)GZ w }. 
The other of the two vector spaces is then given by 

Vd = Vb(*) - { | e D(9), hdE¥ q }, 

namely, the vector space over ¥ q indexed by the elements of D(*f>). It is known JS) that the evaluation map 



ev : ¥ q \x\/Z* V* f (x) ^ (/ 



(4) 



is isomorphic.^] Because {x- | d G -D('I')} is a basis of the quotient ring ¥ q \x\/Z^ viewed as a vector space over 
¥ q , F q [x]/Zq, is isomorphic to Vd- Thus, the map dU can also be written as 



ev : Vd -> V* 



(5) 



In particular, it follows from the isomorphism (0]l or © that |D(^)| = \^f\ and dimy Vd = n. 

Because Vd and V$ have the same dimension n, it is trivial that Vd is isomorphic to V$ as a vector space over 
¥ q . However, this type of isomorphic maps depends on the choice of the bases of the vector spaces; additionally, 
in coding theory, the normal orthogonal basis is not always convenient for encoding and decoding. Our lemma 
asserts that there is a canonical isomorphic map that does not depend on the bases. As explained in Introduction, 
the isomorphic map Vd — > V$ of the lemma is given by the composition of the extension defined in the next 
subsection and the IDFT. 

B. Extension map £ : Vd — > Va 

Let Q\jj be a Grobner basis for the ideal with respect to <. We assume that Q<$, consists of b elements 

{g( w) }o<w<b, where 

9 (w) =g (w \x) = 

2-- + E 9 { t^- G Z * with 6 K\ D W- (6) 

deD(*) 

From now on, A = [0,q — 1} N is considered as a semigroup by the componentwise addition a + b for a = 
(oi, • • ■ , ajv) ,k = (pi, • • ■ , &at) G A, where the component <Zj + b. L is viewed within 1 < (a,- + h mod (q — l))<q 
if <n + bi ^ for 1 < i < N. For example, (0, 0, 1, 2) + (0, 3, 1, 2) = (0, 3, 2, 1) in A if N = 4 and q = 4. This 
semigroup structure of A comes naturally from the multiplication of monomials in F q [x]/Zn, which is isomorphic 
to Va as a vector space because D(Cl) = A. 

Furthermore, for a, b G A, we denote a > b if a% > bi component- wise for all 1 < i < N, or equivalently, if 
there is c G A such that a = b + c. 

Definition 3: (Map from multidimensional linear feedback shift registers) A linear map £ is defined by 

£ ■ V D -»• V A [(h A ) D i y (feJJ , (7) 
where, for all a G A and all < w < b, 

{ h d a = d£ D(^) 

[ — SdeD(*)% ka+d-d w Q> d w . 

To actually compute the value of £ ((^d) D ) = i^a) A from a given (/i^) , we generate (fea)^ inductively by ([8]), 
where, for each a G A\D(4 f ), at least one < w < b can be chosen such that a > d w , and the resulting value 

2 The proof is quoted from (5); the kernel of ev is trivially Zqj and the image of ev is V$ as, for </> £ f^>(x) = YliLi { ^ — ~~ ^i) 9 1 } 
satisfies = 1 and m/>J = for all tp =fi <p. 



does not depend on the choice and order of the generation. |^| Note that each k a for a € A\D( < $>) satisfies at least 
one recurrence relation, and in some case b recurrence relations, from Qy. 

Proposition 2: (Prolongation via £ for the linear sum of monomial values) Let (hd) D £ Vd- Suppose that there 
exists e ^* sucn tnat {hd) D = (j2tf,e^ e ^f) ■ Moreover, let (ka) A — £ {{hd) D ) G Vk- Then, it follows 

that (ka) A = (E ± e* e ±±~) A - □ 

The proof of this proposition is described in Appendix iBl 
Consider a linear map P given by 



P:Vi,->Vd 



D 



(9) 



which is called a proper transform (29], and denote by 1 the inclusion map 



X : V* -> Vh 



where c w = c,^ if w = i/> e $ and c w = if w ^ 4". Then, Proposition [2] asserts that the following commutative 
diagram, i.e., £ o "P = T o J, exists. 

J" 



Vd 



Vq 



(10) 



Proposition 3: (Relation between ev ami If the normal orthogonal bases are taken as those of Vd and V*, 
then the two matrices that represent ev : Vd V$ in (0 and "P : V* — ^ Vd in ® are the transpose of each other. 
□ 

The proof is described in Appendix [C] It follows from Proposition [3] that V is also isomorphic; this fact is noted 
in IFH. 



C. Isomorphic map C : Vd — > V& 

From now on, we denote 1Z as the restriction map 

TZ : V n -> V* 



(«Va) n ^ cy, 



— / *. 



It follows from (TToT > that J 7-1 o £ o V = 2. Moreover, 1Z o J 7-1 ofo'P^'Kolis the identity map on V* . This 
leads to the following lemma, which is frequently used in this paper. 

Main Lemma : Let be a Grobner basis of for \& C fi, and let f : Vd — ^ Fa be the extension map defined 
by (0. Then, the composition map C = 1Z o J 7-1 o £ ; Vd —> V* in the following commutative diagram gives an 



3 If there are a £ A and < v ^ w < b such that « > d and a > d w , then it follows from x— &ug( v > — x— £ that 



EdeD(*) 9d k a+d-d v = EdsD(*) 9 d W>k a+d-d w ■ Thus, fca does not depend on the choice and order of V, w. 



Aw) 
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isomorphism between Vjj and V*. 




Moreover, we have that 



nun 



for all u £ Q\*. □ 



(11) 



Remark 1: As C — V^ 1 , our C can also be obtained from the multiplication of the inverse matrix representing 
l|9). However, if \& is changed, then the inverse matrix must be computed each time. As W takes, e.g., the set of 
erasure-and-error locations and C has a lower computational complexity order than Gaussian elimination, there are 
many cases where C outperforms computing the inverse matrix, as shown in Section [VI] □ 

Remark 2: The above proof of our Main Lemma can also be applied to the non-zero indexed case [19|,|22] 
where A = [0, q — 2] N has a cyclic structure mod (q — 1) and £1 = (F* ) . □ 

Example 3: Putting N = 1, q = 8, and a £ F§ with a 3 +a+l = 0, consider the natural order ^< to be a monomial 
order, i.e., ^ 1 < 2 ^ • • • ^ 7 on A = [0, 7]. Choose * C fi = {0,l,a,e 
Then, £> = £>(*) = {0, 1, 2, 3} and = {g(z)}, where 



6 } as * = {0,a,a 3 ,a 6 }. 



For (h d ) 



D 



g(x) = n (x - -0) 

(ft, , /ii, /i2, M = (a 2 , a 3 , a 5 , 1), £ ((h d ) D ) = (h a ) 



a 3 x + a 3 x 2 + a 2 x 3 + x 4 . 



id) - va) A - {ho, hi, ■ ■ ■ , h 7 ) is given by 
(h 4l h 5 ,h 6l h 7 ) = (a 3 , a 4 , a 3 , a 3 ) 
and J 7-1 (£ ((h d ) D j) = (c w ) n is given by 

(co,ci,c Q , ■ • • ,c a e) = (a 5 ,0, a 2 ,0, 1,0, 0, a 4 ) . 
Note that c u = if ui Then, C{(h d ) D ) = (c^)^ = (c , c Q , c q3 , c q6 ) = (a 5 , a 2 , l,a 4 ). □ 



Example 4: Putting A = 2, g = 8, and a £ Fj with a 3 



1 = 0, consider the lexicographic order ^ to 



> • 



(12) 



be a monomial order, i.e., (0, 0) ■< (1,0) < (2,0) r< • • • d (7, 0) ^ (0, 1) ^ (1, 1) r< • • • < (7, 7) on A = [0, 7] : 
Choose * C ft = F| as 

' (0,0),(0,a 6 ),(a°,a ),(a°,a 5 ), 
(a 1 ^ 1 )^^ 1 ,^ 4 )^^ 2 ,^ 2 )^^ 2 ^ 3 ), 
(a 3 , a 2 ), (a 3 , a 3 ), (a 4 , a 1 ), (a 4 , a 4 ), 
^ (a 5 , a ), (a 5 , a 5 ), (a 6 , 0), (a 6 , a 6 ) 
which, in order to show a pictorial example, is the cross pattern (c^) a in Fig. Q] An element g (x, y) £ of the 
Grobner basis can then be characterized as g(x,y) £ Ws[x,y] with g(-0,u;) = for all (ip,uj) £ that has the 
minimum LM(<?) with respect to ;< One of is computed as 

g(x, y) = a 6 x + a°x 2 + a l x 3 + o?x 4 + a 3 x 5 + a 4 x 6 
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Fig. 1 . Numerical example of Main Lemma, where \t is given by I12t in Example |4] The non-zero elements of Fg are represented by the 
number of powers of a primitive element a with o 3 +a + 1 = 0, i.e., 0, 1, ■ ■ ■ ,6 means a , a 1 , ■ ■ ■ , cfi , respectively, and —1 means S Fg. 
The value of (cw) n in the shaded box indicates Cu_ on f! outside the \I/ of )12t . Note that these values are all —1 according to assertion lilt 
of Main Lemma. 



+ y (a 6 + o^x 1 + a 2 x 3 + a 3 a; 4 + a A x b ) + y 2 . 

The other elements of Qq, are not necessary to extend (hd) D because of the semigroup structure of A; e.g., k a 
with a = (8, 0) can be regarded as a 5 . For a given {hd) D , all values of Main Lemma are shown in Fig. Q] where 
the vertical axis and the horizontal axis (0,1,- ■ ■ ,7) in (ka) A indicate a and b of a = (a,b) £ A, and those axes 
(-1,0,- ■ ■ ,6) in (coj)q indicate %j) and u> of lj — (ip,ui) € f2. □ 

V. Applications of Main Lemma 

A. Affine variety codes ^S]/ 

Let 4" C f2 with * ^ and n = |*|, as at the be ginning of Subsection HV-Al Let U be a subspace of Vjji^i)- 
Consider an affine variety code [8| with code length n 



C{U, *) = ev(U) 



(13) 



= < 



for some (hd) D G 17 



> . 
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where ijA = V^ 1 ■■■tp% N is as in £[). Moreover, consider a dual affine variety code [8] with code length n 

(14) 

</;e* deD 
for all (ha) D e U 

where X^ G * c ±J2deD h di~ in is equal to the inner product of (c^j ^ and cv ((hd) D ) = (j2deD h d4>^j in 
Vy. Thus, the dimension or number of information symbols k of C ± (U, ty) is equal to n — dim.f J7; in other words, 
n — k — dimy U. Note that, as vector spaces, these code definitions do not depend on the choice of monomial 
order; U C Vjjrm is equivalent to U C F g [aJ/Z^. 

On the other hand, let U be the orthogonal complement of U in Vd, i.e., 




Then, similarly to (fT3l l. we obtain 



^ %fcd = for all 6 U 

deD 



C^{U,^)=C(U^) , (15) 

a proof of which is given in Appendix iDl Whereas the definition (TBI of C- L (C7, M/) is indirect and not constructive, 
the equality ( fT5l > provides a direct construction. Moreover, the equality dl~5T > corresponds to the non-systematic en- 
coding of C^(U, \&). Actually, non-systematic encoding is obtained, for all {hd) D € by (c^ = C {(hd) D ) £ 
C" 1 (£/,#) as <Q3]l. 

Example 5: (Continued from Example [3]l Let U C Vd be a vector space generated by (l,0,a 4 ,a 5 ) and 
(0, 1, 0, a 6 ). If these are represented as polynomials f(x) = 1 + a 4 x 2 + a 5 x 3 and x + a 6 x 3 , then ev(t/) C V* is 
generated by 

(/(0),/(a),/(a 3 ),/(a 6 )) 
= (l,a 4 ,a 3 ,l) and (0,a 4 ,l,a 4 ) . 
Then, U C Vd is equal to a vector space generated by 

(u ,ui,u 2 ,u 3 ) = (a 4 ,0, 1,0) and (a 5 ,a 6 ,0, l). 

These extensions are equal to 

(114, u 5 , uq, u-j) — (a 3 , a 2 , a 3 , a 6 ) and (0, a 3 , a 2 , a 3 ) . 

Thus, C (U ±s j is generated by 

(cq, c a , c Q 3, c Q 6) = (a 3 , a 5 , a 5 , a 6 ) and (a 2 , a 4 , a 2 , l) . 

The orthogonality is valid, e.g., a 3 + a 2 + a + a 6 = 0. □ 

Remark 3: A typical case of U is U — Vr for some R C D(ty). Then, {/ = Vd\.r, where Vr and Vdvr are 
considered subspaces of Vd, as in Section [II] □ 
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Fig. 2. Numerical example of the non-systematic encoding of a Hermitian code over Fg in Example \6\ The non-zero elements of F9 are 
represented by the number of powers of a primitive element a with a 2 + a = 1, i.e., 0, 1, ■ ■ ■ ,7 means a , a 1 , ■ ■ ■ ,a 7 , respectively, and —1 
means £ Fg. The value of (ctj) n not in the shaded box indicates on the \& given by (16), and (c^J is a codeword of a Hermitian 
code. 

Example 6: Throughout the rest of Section [V] we consider a Hermitian code, i.e., a code on the Fg-rational 
points of a Hermitian curve, in order to compare our method with conventional methods for algebraic geometry 
codes. Putting N = 2, q = 9, and a 6 Fg with a 2 + a — 1 = 0, consider the weighted graded lexicographic order 
(6) to be a monomial order _< such that (a, 6) _< (a', &') 3a + 46 < 3a' + 46' or 3a + 46 = 3a' + 46', a < a', 
i.e., (0,0) _< (1,0) -< (0,1) -« (2,0) _< (1,1) r< (0,2) _<■■■_< (1,2) -< (4,0) -< (0,3) _< (3,1) r< ••• 1 (8,8) on 
4 = [0, 8] 2 . Choose W C Q = FrJ as 



(0,0),(0,a 2 ) 


,(0, 


a 6 ), (a , a 


% 




(a , a 5 ), (a 


a 7 ^ 




a 1 


a 1 ) 


(a 1 , a 3 ), (a 2 


a 4 ' 


, (a 2 , a 5 ), 


a 2 


a 7 ) 


(a 3 , a ), (a 3 


a 1 / 


, (a 3 , a 3 ), 


a 4 


a 4 ) 


(a 4 , a 5 ), (a 4 


a 7 " 


,(a 5 ,a°), 


a 5 


a 1 ) 


(a 5 , a 3 ), (a 6 


« 4 : 


, (a 6 , a 5 ), 


a 6 


a 7 ) 


(a 7 , a ), (a 7 




, (a 7 , a 3 ), 







which agrees with { (ip,ui) G Fg | ^ 4 = a; 3 + w}, a set of Fg-rational points of a Hermitian curve with defining 
equation x A = y 3 + y. In this case, one of the elements in the Grobner basis is equal to g(x, y) — x A — y 3 ~ y 
and the delta set D(^) of Q<$, is { (a, 6) G A\ b < 2}. The other elements of are not necessary to extend {hd) D 
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Fig. 3. Numerical example for the non-systematic encoding of an extended HCRS code over Fg in Example [7] The elements of F9 are 
represented as in Fig. [2] Because A = D and Q = in this case, £ and 1Z are identity maps, is a codeword of an extended HCRS 

code. 

because of the semigroup structure of A. Let R C D(ty) be R = {{ri,r2) G D( 1 $)\3ri + 4r2 < 11} and let 
£7 = Vr. Then, C x (f/, *) = C (Vd(*)\«) agrees with C n (D, mP^) = C L {D, mP^) 1 - in the usual notation US 
for m = 11 and D = YIn> w)e* ^V,w w ^ tri = w )' ^ or a gi ven (hd) D , all values of Main Lemma are shown 
in Fig. |2l where the vertical axis and the horizontal axis (0,1,- ■ - ,8) in (k a ) A indicate a and b of a = (a, b) E A, 
and those axes (-1,0,- ■ ■ ,7) in (cuj Q indicate t/j and u of uj_ = (ip,u)) S 0. □ 

Example 7: Throughout the rest of Section [VI we consider an extended hyperbolic cascaded Reed-Solomon 
(HCRS) code, which is an example of affine variety codes that are not algebraic geometry codes. Putting TV — 2, 
q = 9, and a G F 9 with a 2 + a - 1 = 0, choose * = n = Wj and A = [0,8] 2 ; then, L> = = A. Let 

i? C D(*) be R = {(ri,r 2 ) G A| (r x + l)(r 2 + 1) < 9}, and let [/ = Vr. Then, C^(U,n) = C (V A \ R ) is an 
extended HCRS code [9|,|13|,[28|,[29|. For a given {hd) D , all values of Main Lemma are shown in Fig. [3] □ 

In Subsection IV-DI it is shown that Main Lemma also gives the systematic encoding of a class of dual affine 
variety codes. 

B. Erasure-and-error decoding: non-systematic case 

Henceforth, consider the situation U = Vr with some R C D(^) from Remark [3] In this subsection, suppose 
that (hd) D G Vd\r is encoded into (^c^j = C ((/irf) D ) G C j_ (Vr, and consider the decoding problem for 
this non-systematic encoding. 
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Suppose also that erasure-and-error (e^j has occurred in a received word (u^J — (c^j + ( e v) from some 
channel. Let $1 C vj> be the set of erasure locations and $2 Q & be the set of error locations with $1 n $2 = 0; we 
suppose that $1 is known, but $2 and are unknown, that e^, ^ ==> ip G U ( E > 2, and that ip G $2 e^, 7^ 0. 

We might permit = for some tp G $1. If |$i| + 2|$2| < <^fr is valid, where <ipR denotes the Feng-Rao 
minimum distance bound [1|,[7|,[23|,[32|, then it is known that the erasure-and-error version [14], [31] of the BMS 
algorithm [4|,[7| or the multidimensional Berlekamp-Massey algorithm calculates the Grobner basis Q^ 1 \j^, 2 . The 
main difference between the erasure-and-error and ordinary error-only algorithms is in the initialization; as <!>! is 
known, Q<$, x can be calculated in advance by the ordinary error-only version, and then G<t> 1 u^> 2 can be calculated 
by the erasure-and-error version from the syndrome and the initial value Q$ 1 . Using the recurrence from ^$^$2 
and Main Lemma, the erasure-and-error decoding algorithm is realized as follows. 

Algorithm 1: (Decoding of non-systematic codewords) 

Input: $1 and a received word (u-^j G V* 

Output: (hd) D G V D \ R , such that C ((hd) D ) = (c^ 



Step 2. Calculate Q$ 1 from syndrome (iv) R 
Step 3. (ud) D = (E^e* u ±±~) d 
Step 4. Calculate G<s> 1 u<s> 2 from (ur) R and 5$i 
Step 5. (kd) D = £ ((Sr) H ) by G<s> lU <s> 2 
Step 6. = (ud) D - {kd) D □ 

At Step 5, = £({u L ) R ) means that = £ (("d)_ D( $ lU $ 2 )) > where the values of £ are only 

computed on D(^) C A by the recurrence relation ((H). 

The validity of this algorithm is proved by the following argument. It follows from Main Lemma that C ( {hd) D ) = 

( c tL ^ ( h £n = (M J = (^±^ c ±t-) D As = ( c ±)^ + ( e ±)^ we have &i) D = 

(^i) d + (S^e* e^?/>-^ in Step 3 and (u £ ) fl = (J2^ eis e ^~J by (TBI , It follows from the proof of Proposition 
[2|that £ = 

e id?r) D m Step 5 ' because of which [/ = Vr is assumed. Thus, we obtain (hd) D = 

(%)zj ~ in Step 6. 

Example 8: (Continued from Example|6]l As it can be shown that dpp. = 7 for C (Vr, 4 r ), the erasure-and-error 
correction can be performed by Algorithm [TJ if | $ 1 1 + 2 1 $2 1 < 7- Erasure-and-error decoding of the non-systematic 
codeword in Fig. |2]via Algorithm QJ is described as follows. The input of Algorithm QJ consists of the received word 
(^u^ in Fig. [4] and a set $1 of erasure locations {(a 6 , a 4 ), (a 6 , a 7 )}. Fig. @] shows the values of vectors at each 
step in Algorithm [TJ In Step 2, the Grobner basis Q§ 1 of Z<j, 1 is obtained as 

Q* x = {.9 (0) = a 2 + x, 5 W = a 2 y + xy, 5 (2) = a 3 + a 5 y + y 2 } . 
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Fig. 4. Numerical example of Algorithm [TJ for a non-systematic Hermitian codeword with erasure-and-errors. The Grobner bases are shown 
in Example [8] 
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Fig. 5. Numerical example of Algorithm [T] for a non-systematic HCRS codeword with erasure-and-errors. The Grobner bases are shown in 
Example [9] 



In Step 4, the Grobner basis G<s>!u<t>2 °f ^*iu$ 2 i s obtained as 

{gW = ax + a 4 x 2 + x 3 , 
#W = 1 + a 7 x + a 2 y + o?x 2 + xy, > ■ 
g( 2 ) = a 5 + a 7 x + a 5 y + a 2 x 2 + y 2 I 
If we perform Chien search for ^$^$2' me set ^i U ^2 of the erasure-and-error locations can be determined; 
however, the explicit set $i U $2 may not be used in our algorithm. It can be seen in Fig. [4] that the erasure-and- 
error spectrum (k^) D is generated by G<s> 1 u<t> 2 from (Ur) R in Step 5, and is then removed from (ud) D in Step 6. 
The resulting (hd) D agrees with the information given in Fig. |2] □ 

Example 9: (Continued from Example |7]i As it can be shown iTOl that d m - ln = rfpR = 9 for C ± (Vr, 1 $>), 
where d m i n is the true minimum distance, the erasure-and-error correction can be performed by Algorithm [TJ if 
|$i| + 2 1 $2 1 < 9. Fig. [5] shows the data at each step of Algorithm [TJ for the erasure-and-error decoding of the 
non-systematic codeword in Fig. [3] The input of Algorithm [TJ consists of the received word in Fig. [5] and a 

set $1 of erasure locations {(0,a 4 ), (a 2 ,0)}. Consider the graded lexicographic order J6) to be a monomial order 
-< such that (a, b) -< (a', V) & a + b < a' + b' or a + b = a' + V, a < a', i.e., (0, 0) -< (1, 0) -< (0, 1) -< (2, 0) -< 
(1, 1) -< (0, 2) -< (3,0) -< ■ ■ ■ -< (0, 3) -< (4, 0) r< (3, 1) -< ■ ■ • -< (8, 8) on A = [0, 8] 2 . In Step 2, the Grobner basis 
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of Z^ >1 is obtained as 

8*1 = {.9 (0) = a&x + X 2 -. 9 {1) = a ° + a2x + v} 
In Step 4, the Grobner basis G<s> 1 u<t> 2 °f ^$iu$ 2 is obtained as 

{g^> = a e + a e y + a 2 x 2 + xy + x 3 , 
<?W = 1 + ax + y + a 5 x 2 + x 2 y, 
g( 2 ) = l+ax + ^y + ^x 2 + a 3 xy + y 2 
The resulting (h^j agrees with the information given in Fig. [3] □ 

C. Erasure-and-error decoding: general case 

In Algorithm [U we removed the erasure-and-error spectrum from the received word spectrum without identifying 
^e^ J . In this subsection, we consider the problem of erasure-and-error decoding with identifying in the 

received word. It follows from Main Lemma that the value of C for the erasure-and-error spectrum is equal to 
(e^j . Though J 7 ^ 1 was not used in Algorithm [1] the map C including J 7-1 is required in Algorithm [2] 

Algorithm 2: (Finding erasures and errors) 

Input: $i and a received word (u^ G V* 



R 



Output: [c ± j^ GC^Vji,*) 
Step 1. («r) a 
Step 2. Calculate Q& 1 from syndrome (v r ) R 
Step 3. (ur) R = (y,i,e^ u ff L 



R 

Step 4. Calculate G$> 1 u<s> 2 fr° m (Sr) R an d G<& x 
Step 5. (e^) T =C((ur)j 

□ 



* V N — > R) 



Step 6. (^)^ = (^)^-(^)^ 

In this algorithm, Main Lemma is used in Step 5, because (u r ) R — ^X^>e* e ^~) = 1 (( e ^) ) ^ rom 
definition (TBI ), and C ((5 r )J = ^e^^j by Main Lemma, which is applied as C : Vd — > V^u^ w i m ^ = 
U $2)- Note that (e^J = C ((udj D ) is denoted as (e^ J — C ((u L ) R ) because V$ lU $ 2 C V% and 

£>($i U $ 2 ) C i?. 

Example 10: (Continued from Example [H} Erasure-and-error decoding of the codeword in Fig. [2] via Algorithm 
12 is described as follows. The input of Algorithm [2] is the same as for Example [8] Fig. [6] shows the values of 
vectors at each step of Algorithm [2] The Grobner basis Q<$, x in Step 2 and the Grobner basis ^$ 1 u* 2 in Step 4 are 
the same as those in Example [8] Although C is used in Step 5 of Algorithm the value of 8 ((^d) D ) is given in 
Fig. [6] in order to show the process. □ 

Example 11: (Continued from Example|9]l Erasure-and-error decoding of the codeword in Fig.[3]via Algorithmic 
is described as follows. The input of Algorithm [2] is the same as for Example [9] All data at each step of Algorithm 
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Fig. 6. Numerical example of Algorithm[2]for a Hermitian codeword with erasure-and-error, cf. Example 1 101 Although only (Sv) R is required, 
(ua) A is shown for consistency and for the discussion in Subsection IVI-BI The delta set D in £ (("d)jj) indicates D(&\ U $2) and £ is 
formed from Gs. 1 us 2 - 
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Fig. 7. Numerical example of Algorithm[2]for an HCRS codeword with erasure-and-error, cf. Example II II As noted in Example 1 101 £ ({ud) 1 
is the computational process of C = T^ 1 o £ in Step 5 of Algorithm |2] A received word ( u^, ) is decomposed into f J and ( c^, J 



|2] are shown in Fig. [7] The Grobner basis Q<$, x in Step 2 and the Grobner basis G<s> 1 u<t> 2 i n Step 4 are the same as 
those in Example [9] □ 

Remark 4: One might consider that, as the Grobner basis G® 1 u<]>2 i s obtained in Step 4 of Algorithms 1 and 
2, and the set $1 U $2 of erasure-and-error locations can be calculated by Chien search, the erasure-and-error 
values can be computed from the system of linear equations ^X^0e$ 1 u*2 e 4> ( ^j = d w ^ t ' 1 

D = D(&i fl<I>2), the matrix of which is invertible by (01 and Appendix ICl If we use Gaussian elimination to solve 
this, then the computational complexity is of the order (t + u) 3 , which is bounded by n 3 . We will see in the next 
section that the computational complexity of Step 5 in Algorithm 1 or 2 for finding the erasure-and-error values or 
spectrum is bounded by the order qn 2+e with any < e < 1. Consequently, we can choose an appropriate method 
according to t + u and n. □ 

D. Systematic encoding regarded as erasure-only decoding 

Because, in practical use, error-correcting codes are usually encoded systematically, it is natural to consider the 
systematic encoding of C^(Vr^). In this subsection, we show that the systematic encoding is equivalent to a 
certain type of erasure-only decoding under Algorithm |2] 
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Systematic encoding means that there exists at least one <£> with $ C $ and |$| = \R\ such that, for any given 
information ( t\u J , we find ( cw, ) G C ± (Vr, 1 J r ) with cv, = /i,/, for all -0 g ^\$. Thus, $ corresponds to the set 
of redundant locations, and ^\<1> corresponds to the set of information locations, in the codewords of C- l (Vr, 



If $ is fixed, then systematic encoding can be viewed as the erasure-only decoding of (^J = y c <l>) ■ However, 
as |$x| = n ~ k = |3>| and |$2 =0, the correctable erasure-and-error bound |$i| + 2 1 <E>2 1 < c^fr is not generally 
valid. 

Example 12: (Continued from Examples [8] and [9]l In Examples [6] and [8] because \R\ — n — k — 9 and c?fr = 7 
for the Hermitian code, the correctable erasure-only bound \R\ = |$i| < dpR is not valid. Similarly, in Examples 
[7] and [9] because \R\ = n — k = 20 and c?fr = 9 for the extended HCRS code, the correctable erasure-only bound 
\R\ = |$i| < cZfr is also not valid. □ 

Nevertheless, we can show that, in many cases, there exists $ such that the systematic encoding works as an 
erasure-only decoding on <£>. We now state the condition for the erasure-only decoding under Algorithm [2] with 

m = \R\. 

Corollary : (Erasure-only decodable condition) Suppose that an erasure-only ye^J has occurred in a received 
word yu^j = + (^ e 4^j from some channel, where ^e^J is unknown, but $ C \I> is known and 

e^, ^ =>■ if> € If the linear map ev \v R ,® given by 



(17) 



is isomorphic, then the received word yu-^j can be decoded by Algorithm [2] □ 

Note that this condition is equivalent to det x t f^ m ) 0, where {x-\ r € i?} = {aj | 1 < i < |i2|} and $ = 
|<^ m 1 < m< |$|| are aligned in any order, and x t f^ m ) is the (Z, ro)-th entry. This matrix is considered in 
Appendix ICl A non-zero determinant value is expected to occur with high probability (q — l)/q. 

The validity of this Corollary can be described directly as follows. Let <f> C C Q, so that ( [T7l i is isomorphic. It 
follows from the surjectivity of ( fTTb that, for any aeA\R, there exists (hr) R G Vr such that ^X^reK^r^") = 
l-<m , . We can then find / G IFg[£] such that / (0) = for all ip G actually, / is given by 

Because a G A\i? is arbitrary, the Q^> = {/^} < w<i , obtained is sufficient to extend Vr into Va via £ by (0 
and |[8); 6 can be taken as, at most, b < q N ~ x if \A\ — q N . The syndrome ^X^e* u tpi }1 ~*j = (X^e* e 4> ( t^j 
can then be extended into £ e 4> ( l )L ^j ) = (S^e* e 0'^ S ") by Proposition |2| and by function 7?. o J 7-1 , 

we obtain C ^2~^0e* e < ^ n ) J — ( e </>) by Main Lemma. 

The computation of G<s> can be performed by the BMS algorithm; for systematic encoding, we calculate the 
Q§ in advance — these play the role of generator polynomials in the case of Reed-Solomon codes. Although the 
following Algorithm [3] is equivalent to a special case of Algorithm [2] for $i = $ and $2 = 0, we give it separately 
to describe systematic encoding. 
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Fig. 8. Numerical example of systematic encoding of the Hermitian code C^-(Vn,^) by Algorithm [3] where $ is given by {18} and the 
Grobner basis Q$ is described in Example 1 131 The given information (jl-oj ^ is systematically encoded into a codeword (c^J 



Algorithm 3: (DFT systematic encoding) 
Input: $ and an information word (hip) 



Output: (c^J £ C-^Vr,*) with ( C <A 

step i. (sy = (E^ e viA* Mr 



= U 



— / *\* 



— / *\* 



Step 2. (fca) A = £ ((iir)^) by Q<f> 

Step 3. (c^) = -TloF- 1 {{ka) A ) □ 

Example 13: (Continued from Example [Tzt Let 

$ f (0,0),(0,a 2 ),(0,a 6 )>,l),(a,a), 
\ ( a ,a 3 )> 2 ,a 4 ),(a 2 ,a 5 ),(a 3 ,l) 

The Grobner basis = {g^K g^\ g^ 2 \ g^} is given by 

,g (0) = a 2 x + a 7 x 2 + ax 3 + x 4 , 



g 



(1) 



a 7 x + x 2 + a 4 x 3 + y(a 3 x + a 4 x 2 + x 3 ), 



(18) 



3 (2) = a 4 x 2 + a 7 x 3 + y(a 4 x + a 7 x 2 ) + y 2 (a 5 x + x 2 ), 
g (3) = a 2 x + a 7 x 2 + ax 3 + y + y 3 . 

As D(Q>) = R, the isomorphy of ( fT71 ) follows from (@). All values of Algorithm [3] are shown in Fig. [8] □ 
Example 14: (Continued from Example [T2l Let 

(0,a 3 ), (l,a 2 ), (l,a 4 ), (a, a), (a, a 5 ), 
(a 2 , 1), (a 2 , a 3 ), (a 2 , a 6 ), (a 3 , 0), (a 3 , a 2 ), 
(a 3 , a 4 ), (a 3 , a 7 ), (a 4 , 1), (a 4 , a 3 ), (a 4 , a 6 ), 
(a 5 , a), (a 5 , a 5 ), (a 6 , a 2 ), (a 6 , a 4 ), (a 7 , a 3 ) 



> ; 



(19) 
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Fig. 9. Numerical example of systematic encoding of the HCRS code (7 (Vr, 'J) by Algorithm [3] where $ is given by {19) and the Grobner 
basis Qn, is described in Example 1141 By regarding as a received word with erasures, the negative redundant part ^— c<f,J is 

obtained. 



although we can choose $ as 



(0,0),(l,0)>,0),(a 2 ,0),(a 3 ,0), 

(a 4 , 0), (a 5 , 0), (a 6 , 0), (0,1), (1,1), 
(ct,l),(a 2 ,l),(0,a),(l,a),(0,a 2 ), 
(l,a 2 ),(0,a 3 ),(0,a 4 ),(0,a 5 ),(0,a 6 ) 



which has the same shape in 51 as R C A because both <£> lead to det x t (V m ) 7^ 0, we adopt ( fT9] l in order to 
show $'s flexibility. The Grobner basis Q^. = {g^\g^\ • • • , g^ 8 -*} is then computed as 



t(0) 



a 4 + a 2 x + a 2 x 2 + a 6 x 3 + x 4 + x 5 + a 6 x 6 + x 7 



+ a 2 y + a 6 y 2 + a 6 y 3 + a 4 y 4 + y 5 + a 2 y 6 + y 7 + x 8 , 



a v x + x 2 + a 2 x 3 + a 5 x 4 + a 4 x 5 + ax 6 + a 3 x 7 



+ a 6 y + a 5 x 2 y + ax 3 y + a 4 y 2 + a 5 xy 2 + a 2 y 3 + a 5 xy 3 
+ ay 4 + y 5 + a 5 y 6 + a 3 y 7 + x 4 y, 

g {2) = a 4 x + a 2 x 2 + a 5 x 3 + a 7 x 5 + a 4 y + a 6 xy + a 6 x 2 y 
+ a 4 x 3 y + a 2 y 2 + a 6 xy 2 + a 5 y 3 + a 4 xy 3 + a 7 y 5 + x 2 y 2 , 



,(3) 



a 6 x + a 5 x 2 + ax 3 + a 2 x 4 + a 5 x 5 + a 2 x 6 + a e y 



+ x 2 y + ax 3 y + ay 2 + axy 2 + a 3 y 3 + a 5 xy 3 + a 6 y 4 



+ a 3 y 5 + a 6 y 6 + x 2 y 3 , 



-,(4) 



a 6 x + a 4 x 2 + a 2 x 3 + ax 4 + x 5 + a 5 x 6 + a 3 x 7 



+ a 6 y + a 5 x 2 y + a 5 x 3 y + y 2 + a 5 xy 2 + a 2 y 3 + axy 3 
+ a 5 y 4 + a 4 y 5 + ay 6 + a 3 y 7 + xy 4 , 



•,(5) 



a 3 x + a 7 x 2 + x 3 + a 4 x 4 + a 2 x 5 + a 4 x 7 + a 3 y 
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+ a 3 x 2 y + a 3 x 3 y + a 3 y 2 + a 3 xy 2 + y 3 + a 5 xy 3 + ay 4 
+ a 2 y 5 + y 6 + a 4 y 7 + xy 5 , 

g^®' = ax + ax 2 + a 2 x 3 + a 2 x 4 + a 7 x 5 + a 4 x 7 + ay 
+ a 3 x 2 y + a 3 x 3 y + a 5 y 2 + a 2 xy 2 + a 5 y 3 + a 1 xy 3 
+ a 6 y 4 + a 7 y b + xy 6 , 

5 (7) = 1 + ax + a 4 x 2 + a 5 x 4 + a 6 x 6 + a 3 x 7 + ay 
+ a 2 xy + a x 2 y + a 7 x 3 y + a 3 y 2 + a 7 xy 2 + a 3 xy 3 
+ ay 4 + a 2 y 6 + a 3 y 7 + xy 7 , 

g (8) = a 4 + a 2 x + a 6 x 2 + a 6 x 3 + a 4 x 4 + x 5 + a 2 x 6 
+ x 7 + a 2 y + a 2 y 2 + a 6 y 3 + y 4 + y 5 + a 6 y 6 + y 7 + y s . 

All values of Algorithm [3] are shown in Fig. [9] □ 

Thus, the systematic encoding can be viewed as a special case of Algorithm [2] for (^u^j — yty'J with 
= for all ip G As there are many cases where the erasure-only correctable bound is exceeded, it is expected 
that both erasure-only and erasure-and-error can often be decoded beyond the erasure-and-error correcting bound 
| $i | +2 1 $2 1 < <^FR' In lETI . the improvement and the necessary and sufficient condition for generic erasure-and-error 
decoding to succeed are obtained for Hermitian codes. 

Remark 5: If linear codes have non-trivial automorphism groups, then systematic encoding can also be performed 
by a division algorithm via Grobner bases for modules fT2l . fl6l . Indeed, there are cases where its computational 
complexity is less than that of Algorithm [3] as shown in I5l. l34l . On the other hand, our method is more widely 
applicable to codes independent of automorphism groups. Another advantage of our method is that there are cases 
where encoding and erasure-and-error decoding are integrated, and thereby the overall size of the encoder and 
decoder is reduced; for the case of Reed-Solomon codes, see l20l . □ 

VI. Estimation of Complexity 

A. Simple counting 

We now estimate the number of finite-field operations, i.e., additions, subtractions, multiplications, and divisions, 
required by our method. We consider Algorithm [2] for the code C (Vr, as our systematic encoding algorithm 
corresponds to a special case of Algorithm [2] In this subsection, we simply count the operations in each step of 
the algorithm. 

A summary of the results of our evaluation is given in Table U where n is the code length, N is the dimension 
of f2, q is the finite-field size, b is the number of elements in the Grobner bases, and Step 5 is decomposed into 
Step 5a of (k s ) A = £ ((ur) R ) and Step 5b of (e^ = TZoJ 7 ^ 1 ((&o) J. We now consider the above estimation 
of each step. 
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TABLE I 

Number of Finite-Field Operations in Algorithm[2] 



Algorithm [2] 


manipulation 


order of bound 


Step 1 


v^* e *i — in 


Nn 2 


Step 2 


BMS 




Step 3 




Nn 2 


Step 4 


BMS 


bn 2 


Step 5a 




N 

nq 


Step 5b 




nNq N 


Step 6 




n 



Step 1) The calculation of DFT X^e*i ^~ can ^ e decomposed into updating <fr- and adding to the preserved 
value. This means that, at most, iV+1 operations are repeated |$i| times, so (iV + l)|<£>i| operations are required to 
compute one sum X^e$! As there are at most |^| = n values on R C D(^), the total number of F g -operations 
in Step 1 has an upper bound of the order Nn 2 . 

Step 2) The computational complexity of the BMS algorithm |4|.f7l is quoted as bn 2 . 

Step 3) Similarly to Step 1, the calculation of DFT 53i/>ew u -tp x l ) ~ can be decomposed into updating xj)-, multiplying 
by Uip, and adding to the preserved value. As these three operations are repeated l^j times, (A r +2)|'I'| operations are 
required to compute one sum X^e* u^ip-. As there are at most n values on R, the total number of F g -operations 
in Step 3 has an upper bound of the order Nn 2 . 

Step 4) The order bn 2 is quoted, as for Step 2. 

Step 5a) For the extension of syndrome values, there are 2|D( 1 I')| = 2|4 f | additions and multiplications in the 
recurrence (HJ. Thus, the order of the upper bound for the extension is nq N . 

Step 5b) Similarly to Step 3, the calculation of J 7-1 can be decomposed into updating uj^ 1 ■ ■ -co^ lm , summing 
S /c[i n]\i(~ l)'' 7 '^i(/.J)' multiplying, and adding to the preserved value. The total number is (m + 2 N ~ m + 2) q m , 
which is bounded by (N + 3)q . As these operations are repeated n times, the total number of F g -operations in 
Step 5b has an upper bound of the order nNq N . 

Step 6) Exactly = n subtractions are performed. 

Because N < b, the total number of operations in Algorithm |2] has an upper bound of the order bn 2 + nNq N . 
If N = 1, then we have n < q and bn 2 + nNq N < 2q 2 . Suppose that N > 1. In the proof [8] of {linear codes} = 
{affine variety codes}, q N is chosen as q N ~ x < n < q N , which leads to q N < qn and N — 1 < log g n < N. Then, 
bn 2 + nNq N has an upper bound of the order n 2 (b + q \og q nj ; the factor (b + q log ? n) is comparatively less 
than n. Thus, Algorithm |2] improves the order n 3 of the total computational complexity of the erasure-and-error 
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TABLE II 

Number of Finite-Field Operation in Algorithm[2]Applied an M-D DFT Algorithm to Steps 1,3, and 5b 



Algorithm [2] 


manipulation 


order of bound 


Step 1' 




Nq N+l 


Step 3' 




Nq N+l 


Step 5b' 


f- 1 ((%) J 


( Nq N+1 N <q 
\ 2 N q N + 1 general 



decoding by the Gaussian elimination. Our method based on Main Lemma reduces the complexity of evaluating 
erasure-and-error values from 0(n 3 ) to 0{n 2 q\og q n). 

B. Application of multidimensional DFT algorithm 

In Steps 1, 3, and 5b of Algorithm [2] the computations of DFT and IDFT are restricted to values on R and *£, 
respectively. In this subsection, we consider the algorithm that enlarges their computations to A and ft, i.e., the 
algorithm that replaces Steps 1, 3, and 5b with the following. 

Stepl'. (va) A ^(E t e^t 2 -) A 

Step 3'. (ua) A = (Ev-g* ) A 

Step5b'.(e ! J n =^- 1 ((y A ) 
If the complexity of Steps 1', 3', and 5b' is estimated by the same method as for Steps 1, 3, and 5b, the result is an 
upper bound of the order Nq 2N . It is well-known that the computational complexity of the ordinary FFT is of the 
order L log L, where L is the size of the data. As L = q N in our case, L log L is equal to Nq N log q, though the 
ordinary FFT cannot be applied to our DFT and IDFT over the finite field. By applying a multidimensional (m-D) 
DFT algorithm [3 |, we find the computational complexities of Steps 1', 3', and 5b' to be as shown in Table llll 

First, we show by induction that the computational complexity of calculating ^((c^)^) = ^XLen Cw — ~) ^ s 
bounded by 3Nq N+1 . For N = 1, we obtain the bound 3q 2 , as XLer? " 1 ^ ^ s decomposed into updating ui a , 
multiplying by c u , and adding to the preserved value for all uj e Q = ¥ q and for all a € A = [0, q — 1]. Assume 
that, for N — 1, we obtain the bound 3(N — l)q N . The summation can be decomposed as 

Eajv \ ^ ai o-N-l /f)m 

W JV 2^ t W".«w-i.<-w) w l ■■■ UJ N-1- ( 20 ) 

By induction hypothesis, the complexity of the interior summation in d20b for all oi, • ■ • ,a^-i € [0,q— 1] is 
bounded by 3(N — l)q N . For all ujm E ¥ q , the values of the interior summation are calculated in advance. The 
complexity of the exterior summation in d20b for all oat G [0,5 — 1] is then bounded by 3q 2 , from the case of 
N = 1. As the exterior summation is carried out for all at, ■ ■ ■ , a,N-i S [0, q— 1], the total complexity of computing 
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J 7 ((ccjj n ) is bounded by 

3(N - l)q N xq + 3q 2 x q N ^ = 3Nq N+1 . 

Next, we estimate the complexity of calculating T~ x as follows. In ([3), the values of Y^jan. n]\i(~ •"■)'"* ^i(-M) 
are computed for all 1 < 1%, ■ ■ ■ , l m < q in advance; the complexity is 2 N ~ m (q — l) m . Then, similarly to J 7 , the 
summation of 1 < l\, ■ ■ ■ , l m < q is computed with a complexity of 3m(q — l) m+1 . As there are ( ) choices of 
I ^ [Ij-V] sucn that |/| = m, the total complexity of computing J 7 ^ 1 is bounded by 

E ( N ){2 N - m (q-l) m + 3m(g-ir+ 1 } 

m=0 ^ ' 

< (q + 1) N + Wq N+1 = (1 + l/q) N q N + 3Nq N+1 

<e N liq N +3Nq N+1 . (21) 

If N < q, then (f2TT > has an upper bound of the order Nq N+1 , otherwise 2 N q N+1 . Thus, it is strongly recommended, 
from the perspective of using the m-D DFT algorithm, that we should increase q rather than N in order to satisfy 
q N ~ x < n < q N for a given n. In the general case including N > q, we may choose either Steps 1, 3, and 5b or 
Steps 1', 3', and 5b' in order to minimize the complexity of nNq N or ( f2Tb . 

On the other hand, as for Step 5a, we cannot apply the m-D DFT algorithm to the computation £ ((M r ) fl ), which 
has a complexity of order nq N . However, note that the equality ^ that defines the extension £ is almost identical 
to that of the discrepancy of the BMS algorithm. Actually, in the BMS algorithm, the discrepancy T>a (g^) of 
updating polynomial g( w *> G F 9 [x] at a £ A is represented by 

deD(<H) 

for which the summation is the same as in ([8). Thus, the computation of £ ((u r ) R ) in Step 5a can be considered 
as the extended part of the BMS algorithm, and does not cause serious damage in practice. 

VII. Conclusion 

Conventionally, the m-D DFT and IDFT over ¥ q are seen as transforms between two vector spaces, each of which 
is indexed by (F* ) N . In this paper, we have generalized these to transforms between two vector spaces, each of 
which is indexed by F^\ Moreover, the Fourier inversion formulae of their transforms has also been generalized. We 
obtained a lemma using the linear recurrence relations from Grobner bases and the generalized inverse transforms. 
This states that there is a canonical one-to-one linear map from a vector space indexed by the delta set of Grobner 
bases onto another vector space indexed by an arbitrary subset of F^ . As an application of our lemma, we have 
described the construction of affine variety codes, and have shown that the systematic encoding of a class of dual 
affine variety codes is nothing but a special case of erasure-only decoding. As another application of our lemma, 
we have proposed a fast error-value estimation in the erasure-and-error decoding of the class of dual affine variety 
codes. We have improved the computational complexity of the error-value estimation from 0(n 3 ) under Gaussian 
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elimination to 0(qn 2+£ ) with any < e < 1, where n is the code length. Future work will concentrate on improving 
the error-correcting capability of generic erasure-and-error cases. 

Appendix A 
Proof of PropositionQ] 

It may be proved that, for fc£j G Vq, if (ka) A = J 7 (( C L) ) and ( c w) n = J 7 ^ 1 ((kg) A ) are defined, then 
(cuj) n = (c'Sj holds. 3 This is shown as follows, where we denote ZJ — (— l) 1 "^"' 1 ■ ■ - lu^ 



Jl,-,im=l [jC[l,jV]\7 
9-1 



,/ m =i I jc[i,jv]\z Ven 



E E (-d |j| E^-^- 



9-1 



h,— ,i m =i lv>en \jc[i,n]\i 



E E4 E (-W'-i^ 



= E I E (22) 
= (-i) m («-i)%=(4 

At the conversion to d22l i. the following equality ( f23l l has been used. For a given w 6 O, let / = 7 W be as in 
Definition |2] Then, for any ip G f2, 

y ( _i)i^(w) = ( if^ = ofervi€[i,jv]\j tt (23) 

jc[^\j„ ~ \ if 3t G [1, JV]\/fi, with V, ^ 0. 

As ip^ 1 ^''^ = ip 1 ^ ■ ■ ■ -0' m Yije j ^f _1 > trie equality (|23T l is proved by the following formula, which is known as a 
variant of the inclusion-exclusion principal [18|, 

e (-i) |j| n^r l = n O-^r 1 )- □ 

JC[1,N]\I„ j£J ie[l,N]\I„ 

Appendix B 
Proof of Proposition^ 

From the assumption, we have 

kd = E e ^-> (24) 

4 If T^ 1 o T = id., then J 7 is injective and 1 is surjective, and it follows from dim Va = dim Vq that T and J 7-1 are isomorphic and 
that T o J 7-1 = id.. 
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where d G D = D(^>). We now show by induction that d24l > holds not only for d 6 D(^>), but also for d G A if 
(fea) a satisfies the linear recurrence relation ([H) from Q^. Actually, we have 

; (">); M ia+d-d 
k a = - 2^9d k Z+d-d u , =- 2_^9d 2^ ^ ™ 



-Eff 



where we use — X^gd 9d y = which follows from g( w \il>) — in © for ii e $. Thus, (124-b holds for all 



d = a G A; in other words, I ha = X^iAg* e i/> y] holds. □ 



Consider an n x n matrix 
{x_i | 1 < I < n} and * = 



I— 77 



Appendix C 
Proof of Proposition^ 

(^m) wnose tn)-th entry is equal to X; (1^ 
1 < m < n\ are aligned by any order with n 



ev : Vr> — > V$ of (O can then be represented as 

( h «)n^ [E^ 
\de_D 



where {z- | G = 
= |*| = |-D(*)|. The map 



(25) 



where (hi) represents any row vector of length n. Moreover, the map V : V* — > Vd of © can be represented as 



E c tt~ 



(«) i-> (q) 



(26) 



where (cj) represents any row vector of length n. These facts lead to Proposition [3] in case of the standard bases 
because x m f^J indicates the transpose matrix whose (l,m)-th entry is equal to x m {^P^j- 

Suppose that {v\, ■ ■ ■ ,v n } and {v[, ■ ■ ■ ,v' n } are any two normal orthogonal bases of Vd that consist of row 
vectors. Then there exists annxn matrix A with t (A~ 1 ) = A such that [u,] = A[v'^\, where [vi] and [v^] represent 
the matrices whose i-th row are equal to vi and v[ for all 1 < i < n. Similarly, suppose that {wi,--- ,w n } 
and {w[,--- ,w' n } are any two normal orthogonal bases of Vj. that consist of row vectors. Then there exists 
an n x n matrix B with t B = B^ 1 such that [wi] — Thus the conditions (f25l and ( l26l l indicate that 



— ' (^m) ^ we ta ' ce tne stanc ' arc ' bases {vi} and 



(hi) [evfa)] = (h)X and (q) [?(»,)] = (q) 4 X with X = 
{w;} with the rc-th identity matrix [u,] = [to*]. Suppose that (ft/) [ev(t>£)] = and (c/) ["P(u>-)] = (c/)Z[^]. 

Then we have 

[evK')] = ^S- 1 = A" 1 [ev = A- 1 ^, 
= ZA- 1 = B- 1 [V (Wi)] = B- U X. 

Thus we have Y = A~ r XB, Z = B~ U XA, and *Y = Z, which leads to Proposition [3] in case of any normal 
orthogonal bases. □ 
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Appendix D 
Proof of C x (U, *) = C (U 1 -) 

We show that, for all (^u^j G ev(U) and all yv^/J G C (U^), the value of the inner product X^e* u ip v ip * s 
equal to zero. Let (ui) 1<Kll be the aligned (u^j , as in Appendix[C] By d25l l. e ev(U) is represented as 

(w ; ) = (hi) x { U/^J for some (hi) G J7. 

Similarly, let (vi) 1<l<n be the aligned (v^j . As C = "P -1 and (1261 1. (ityj G C (U^) is represented as 

M^Mi)]" for (to) 

Because the transpose of the row vector (it;) is equal to a column vector (w m ) = x m (h m ), X^e* U *P V *P 

is equal to 

O)( M »0 = (h) x m (i^j x m (j^j (h m ) = o. □ 
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